Malicious code in dragand-player-plugin (npm)

The package dragand-player-plugin was found to contain malicious code...